[Verse-dev] Verse Security

[Jiří Hnídek]

Hi,
It is true, that there is only binary Verse Python module that could be 
compiled from source code of Verse:

https://github.com/verse/verse

Of course it would be better to have pure Verse Python module due to 
portability, but I don't have time for implementing such module now. On 
the other side, anybody can implement Verse Python module in pure 
Python, because specification of protocol is described here:

https://github.com/verse/verse/wiki/Specification

IMHO, I don't see any security concern in module written in C using 
Python C-API. Fore example installation of Python includes dozens of 
such modules.

I'm sorry, but I will not react on the rest of your e-mail, because it 
is really hard to understand you.

BTW: I missed your name.

Best regards,

Jiri

Dne 5.9.2014 13:24, mail at smokythaklown.com napsal(a):
>
> (please somone help me understand the verse security risk)
>
> If the verse protocol is not in python, and needs python bindings  (i 
> believe) it implies security holes. "wordpress joomla drupal" in ten 
> years have over 300 security breaches while python servers and cms 
> like zope and plone *which the FBI uses* only have 2-6 ii recall.  So 
> with all these protocols -tcp, udp, ftp, sftp, pysftp, icmp, smpt, 
> imap, all sorts of protocols to transfer packet information, my 
> confusion boils down to why for what, and wouldnt it simplify life if 
> we make a blender protocol  with the old verse packet structure that 
> "excludes" any 3rd party language compatibility... My worry is if we 
> build a verse-uni verse future network, then all sorts of operating 
> systems and computing languages can corrupt the system with poop 
> scripts (i assume). I mean if we take a real moment to look at 
> blender, once it can boot off a hard drive without an operating 
> system, pure python, and you add a python web browser within blender, 
> then the practical use of a desktop operating system dissapears.. So 
> it seems obvious the future of blender is blending, SO WHY ARE WE 
> BLENDING WHAT IS NOT NEEDED. Pure python. We make snakes work, snakes 
> dont make us work (look at blend4web.com spent half a decade working 
> blender into java, when java is done for)
>
>
> On 04-09-2014, Yassim wrote:
>
>> Ello,
>>
>> I'm in no way a maintainer or anything, but I did find this recently
>> https://github.com/verse
>>
>> I think the orgiinal is/was here.
>> https://projects.blender.org/projects/verse/
>>
>> And I got there from here.
>> http://www.quelsolaar.com/files/index.html
>>
>> I hope this helps.
>>
>>
>> Yassim.
>>
>>
>> On Thu, Sep 4, 2014 at 12:00 PM, Jordan Wise <jordanwise17 at gmail.com  <mailto:jordanwise17 at gmail.com>> wrote:
>>> Hi guys, Does anyone know where it is hosted? Did anyone reply? I'd 
>>> like to know as well Thanks, Jordan On 31 August 2014 22:44, 
>>> FRANCISCO ORTIZ <chicortiz at gmail.com <mailto:chicortiz at gmail.com>> 
>>> wrote:
>>>> Hello everyone! Do you know where the old Uni-Verse SVN is hosted 
>>>> right now? Thank you, Ortiz 
>>>> _______________________________________________ Verse-dev mailing 
>>>> list Verse-dev at blender.org <mailto:Verse-dev at blender.org> 
>>>> http://lists.blender.org/mailman/listinfo/verse-dev
>>> _______________________________________________ Verse-dev mailing 
>>> list Verse-dev at blender.org <mailto:Verse-dev at blender.org> 
>>> http://lists.blender.org/mailman/listinfo/verse-dev
>> _______________________________________________
>> Verse-dev mailing list
>> Verse-dev at blender.org  <mailto:Verse-dev at blender.org>
>> http://lists.blender.org/mailman/listinfo/verse-dev
>
>
> _______________________________________________
> Verse-dev mailing list
> Verse-dev at blender.org
> http://lists.blender.org/mailman/listinfo/verse-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.blender.org/mailman/private/verse-dev/attachments/20140905/84de41f6/attachment.htm